RepoPilot

666ghj / mirofish

Search 666ghj/mirofish

GitHub

Repository health

Security, maintenance, dependencies and license for 666ghj/mirofish.

Security

0
Critical
0 direct
0
High
0 direct
0
Moderate
0
Low

24 dependencies checked (1 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.

Security checks (RepoPilot estimate) · 4.2/10

OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.

  • Recent activityLast commit 7d ago10/10
  • Tests run on pull requestsCI configured + tests present10/10
  • Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
  • License fileLicense: AGPL-3.08/10
  • Pinned dependenciesOnly 0/6 actions pinned to SHAs2/10
  • Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
  • Automated dependency updatesNo Dependabot or Renovate config found0/10
  • Security policyNo SECURITY.md found0/10
  • Static analysis on commitsNo SAST workflow detected0/10
  • Branch protectionDefault branch 'main' has no protection rule0/10

Maintenance

16 Oct 2026
Last commit
active
100+
Commits in the last year
19
Contributors
all time · 16 in the last 95 commits
v0.1.2
Latest release
~38d cadence

Outside contributions: 0 of 99 external pull requests merged (0% of those decided).From the 99 most recently updated pull requests, bots excluded.

Recent releases

  • v0.1.27 Mar 2026 · 44 days after previous
  • v0.1.122 Jan 2026 · 31 days after previous
  • v0.1.022 Dec 2025

Pull requests

Open
30
0 stale (60+ days, no update in 30)
Merged
0
of the 30 latest
Median time to merge
Unknown
From bots
0
not listed below

Recently merged

None from people in recent pull requests.

The 30 most recently updated pull requests.

Top contributors

Of the 95 most recent commits.

Issues

Open
202
issues and pull requests, as GitHub counts them
Median time to close
Same day
from 4 closed of the 25 latest
Awaiting first reply
16
of 21 open among the 25 latest
Oldest open
290 days

Most wanted

Rates come from the 25 most recently updated issues; the open count and oldest issue cover the whole repository.

Dependencies

Checked packages and import counts

These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.

24
Packages checked
npm
1
Direct packages checked
listed in the manifest
23
Transitive packages checked
pulled in by other packages
417
External imports
outside packages the code imports

License

AGPL-3.0
License
Strong copyleft (network)
Family
Unknown
License conflicts in dependencies
Dependency licenses were not checked
Commercial use: AGPL extends copyleft to network/hosted use — shipping it in a SaaS can require releasing your source. Review carefully before commercial use.